3 ms·

Actually a Dockerfile parser that can spin up Firecracker VMs and handle volume/net_iface binding transparently would be really neat.

• tptacek 6y ago
  Our local dev environment does this, but it does it by running our driver (so we can test the driver) so it's a lot more mechanism than you'd need. You could get this done yourself pretty easily: just unpack the Docker image (there's a Docker command that does this, I forget what) onto a mounted loop device, then hand its block device off to Firecracker. Our driver does its own local address goop, but it's not complicated (it just dumps netlink and allocates the next available subnet in a particular range). Having said all that: there are projects that do this already; for instance, I think there's a Kata Firecracker somewhere.
• rad_gruchalski 6y ago
  I am working on something like this: https://github.com/combust-labs/firebuild https://github.com/combust-labs/firebuild. From a Dockerfile, it's not as simple without creating an image first. The command @tptacek means is most likely docker export for a running container and docker save for an image. First exports selected paths, second exports a complete image as a tgz archive.